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@ System for data field area acquisition in IC card for multiple services. 

<g) Information indicating the limit of size of area which is 
permitted to a service provider and an authentication code of 
the service supplier are stored in an IC card upon issuance. 
When a service is to be added, a service supplier is 
authenticated, and thereafter, acquisition of a data field area 
within a predetermined size of data field area is permitted 
(through 3 and 4). Thus, in the IC card for multiple services, 
upon addition of a new service after card issuance, the use of a 
remainder vacant area in the IC card by an unauthenticated 
service supplier and the exclusive use of the vacant area by a 
specific service supplier are prevented. 
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Description 



SYSTEM FOR DATA FIELD AREA ACQUISITION IN IC CARD FOR MULTIPLE SERVICES 



BACKGROUND OF THE INVENTION 

5 

1. Field of the Invention 

The present invention relates to a system for 
acquiring a data field in an integrated circuit card (IG 
card) for multiple services. The system according to 
the present invention discriminates whether or not a 10 
service for which a data field area is acquired is 
provided by an authorized source, and controls the 
acquisition of the data field area within an allowable 
range. 

IS 

2. Description of the Related Art 

In an IG card for multiple services, all the services 
to be provided are not always determined upon card 
issuance. The IC card often has vacant areas. When 
the IC card has vacant areas, some services may be 20 
additionally provided to the vacant areas in the card 
after card issuance. 

The source which additionally provides a service 
must not be an arbitrary third party, but one of 
several limited companies, organizations, company 25 
groups, organization groups, or the like. Also, the 
data field area used must be limited. If a given 
service supplier is allowed to use any size of area, 
another would find it difficult to additionally provide a 
service. Therefore, it is desired that each service 30 
supplier be allowed to use only up to a predeter- 
mined size of area. 

In a conventional system for acquiring a data field 
area, the data field area is additionally acquired 
based on the area size demand input from a terminal 35 
apparatus to an IG card and the data field information 
already formed in the IC card. 

In the conventional system, data field formation 
demand input from a terminal apparatus can be 
accepted regardless of the demander, and the data 40 
field area, corresponding to the demanded area size 
is acquired in so far as there is a vacant data field 
area in the IC card. In the conventional system, 
therefore, there are problems that, if only a former of 
a data field obtains a right and approval for forming 45 
an area, a data field may be formed in the IC card by 
an unauthorized source, or the data field area in the 
IC card may be exclusively occupied by a specific 
service supplier, and there may be a disadvantage 
that, if an attempt is made to add an additional 50 
service to the IC card, there is no area vacant for 
such an additional service. 



SUMMARY OF THE INVENTION 

It is an object of the present invention to provide 
an improved system for data field area acquisition 
wherein a plurality of area user identifications and 
authentication codes and usable area size data are 
stored in an IC card upon issuance of the IC card. A 
data field formation demand by a person other than 
an authenticated area user or a data field formation 
demand for an area larger than a predetermined size 
is rejected, so the IC card can be protected from 
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illegal data field formation. 

According to the present invention, there is 
provided a system for data field area acquisition In an 
IC card for multiple services, the system including: a 
plurality of data fields for storing data; an area user 
identification Input unit; an area user authentication 
code input unit; an area size demand input unit; an 
area user authentication unit; an area size calculat- 
ing unit for calculating a remainder area for an 
authenticated area user; a table storage unit for 
storing table for data field control; and a data field 
area acquiring unit. The calculation of a remainder 
area for user authenticated by said area user 
authentication unit is carried out based on an Input 
area size demand and information stored in the tbie 
storage unit. Based on the cumulative result of the 
area user authentication and the calculation of the 
remainder area for the authenticated area user, 
acquisition of an additional data field area is carried 
out within a limit of usable area size. 

BRIEF DESCRIPTION OF THE DRAWINGS 
In the drawings, 

Rg. 1 is a perspective view of an IC card used 
in a system of the present invention; 

Fig. 2 is a circuit diagram when the IC card 
used in the system of the present invention is 
used; 

Fig. 3 is a view showing a conventional 
system; 

Fig. 4 is a blocl< diagram of a system 
according to an embodiment of the present 
Invention; 

Fig. 5 is a flow chart showing the operation of 
the system shown In Fig. 4; and 

Fig. 6 Is a view for supplementarily explaining 
the system shown in Fig. 4. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 
Prior to a description of a preferred embodiment 
of the present Invention, an IC card as used both in 
the system of the present invention and a conven- 
tional system will be described. Figures 1 and 2 are 
for explaining an IC card. As shown in Fig. 1, an IC 
card has contacts, an integrated circuit module 
arranged beneath the contacts, and an area to be 
embossed. 

Figure 2 shows a terminal apparatus electrically 
connected to the IC card, a program portion for 
requesting formation of a data field, and a trans- 
mission path through which an area user identifica- 
tion and an authentication code (AG code) desig- 
nated by the program and an area size demand are 
transmitted to the IC card. 

The IC card includes a CPU as a data processor, a 
memory, such as EPROM and/OR EEPROM. for 
storing Input Information, control Information, and 
data fields, and a ROM for storing control programs. 
In addition, a plurality of metal contacts for electri- 
cally contacting an external apparatus are provided 
on the surface or back of the card. 
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Figure 3 shows an example of a conventional 
system for acquiring a data field area. In Fig. 3, 
reference numeral 13' denotes a portion for Inputting 
an area size demand; 81, 82, and 83, data fields 
already formed In an IC card; 80, an additionally 
acquired data field; and 4', a portion for acquiring 
data field data. 

In the conventional system shown in Fig. 3, a data 
field formation demand sent from a terminal appara- 
tus is accepted regardless of the requester when the 
requester Is authenticated by general authentication 
such as a personal identification number and an 
authentication code for an IC card. Thus, a data field 
area corresponding to an area size demand is 
acquired by the portion 4' as long as the IC card has 
a vacant area. In this manner, a data field is 
additionally formed. 

A system for data field area acquisition In an IC 
card for plural services according to an embodiment 
of the present invention will now be described with 
reference to Figs. 4 and 5. Figure 4 shows a system 
according to an embodiment of the present inven- 
tion. 

The system of Fig. 4 includes an area user 
identification inputting portion 11, an authentication 
code inputting portion 12, a portion 13 for inputting 
an area size demand, area user identifications 51, 
area user authentication codes 52, usable area sizes 
53, and a storage 5 for a table for data field control, 
constituted by the plurality of area user Identifica- 
tions 51 . the authentication codes 52, and the usable 
area sizes 53. 

The system of Fig. 4 also includes memories for 
area user identifications 61 , 62, and 63 correspond- 
ing to the data fields, area size information 71, 72, 
and 73 corresponding to the data fields, data fields 
81, 82, and 83, an area user identification 60 
corresponding to a data field 80 to be additionally 
acquired, an area size information 70 of the data field 
to be additionally acquired, and an additionally 
acquired data field 80. 

The system of Fig. 4 further includes an area user 
authentication portion 2, a portion 3 for calculating a 
remainder area for an authenticated area user; and a 
portion 4 for additionally acquiring a data field area. 

The operation of the system shown in Fig. 4 will 
now be described. The authenticating portion 2 
compares an input area user identification from the 
portion 1 1 and an input authentication code from the 
portion 12 with a corresponding area user identifica- 
tion and an authentication code stored in the table 
storage 5. An authentication code corresponding to 
an area user identification in the table storage 5 
which coincides with the area user Identification Is 
validated with regard to the input authentication 
code, thereby authenticating an area user. 

When an area user is authenticated, a sum of area 
sizes of already formed data fields is subtracted 
from a corresponding usable area size in the table 
storage 5, thereby calculating a remainder usable 
area of the corresponding area user. 

When the remainder usable area size is equal to or 
larger than the demanded area size, the data field 
area acquiring portion 4 Is operated. 

When the vacant area in the IC card Is equal to or 



larger than the demanded area size, the data field 
area acquiring portion 4 acquires an area in the 
vacant area, and thus additionally forms a data field. 

Figure 5 Is a flow chart for explaining the operation 
5 of the system shown in Fig. 4. 

A memory data field formation demand, a user 
identffication, an authentication code, and an area 
size demand for the IC card are received from a 
terminal apparatus. 
10 The CPU searches for an area user identification 
corresponding to the input area user identification in 
the table storage 6 (step SI). 

When no coincident identification is found, It Is 
determined that a demander is not an authenticated 
15 area user, and an error indication is made. 

For example, a non-response state is established 
for an external apparatus, or information indicating 
that registration is not permitted Is indicated as a 
response signal. 
2C7 If a coincident identification is found, an authenti- 
cation code in the table storage corresponding to 
the identification is validated with regard to the input 
authentication code (step S2). 

If the validation result is noncoincldence. it is 
25 determined that a demander is not an authenticated 
area user, and an error indication Is made. However, 
when coincidence is established, it is determined 
that a demander Is an authenticated area user, and 
the control advances, to authentication of the area 
30 size (step S3). 

Area user identifications in data fields in the IC 
card are compared with the input area user 
identification so as to find a coincident data field 
(step S4). 

35 Then, the CPU sums the area sizes of these data 
fields and derives the sum as a used area size with 
respect to the area user identification (step 85). 
If the area has not been used, the sum is zero. 
Next, the used area size is subtracted from a 
40 usable area size in the table storage corresponding 
to the area user identification, and the difference is 
compared with the input area size demand. 

If the difference is smaller than the area size 
demand in the above comparison step, an error 
45 indication is made since a vacant area is not available 
(step S6). 

If the difference Is equal to or larger than the area 
size demand, the area size demand is compared with 
the area size of the vacant area in the IC card. If the 
50 area size demand is larger than the vacant area, an 
error indication is made since the vacant area is not 
available (step S7). 

If the area size demand is equal to or smaller than 
the vacant area size, a new data field area is acquired 
55 from the vacant area of the IC card, an area user 
identification and an area size are set, and a data 
field is additionally formed. Thus, the processing is 
ended (step SB). 
As the area user identification, an Identification of 
60 a service supplier or that for a group of service 
suppliers is used. 

Figure 6 is a block diagram for supplementarily 
explaining the system of the present invention. That 
is, from another point of view, the system shown in 
65 Fig. 4 can be considered as one having an 
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arrangement snown in Fig. 6. 

A unit for using a memory accesses a use area 
registered in a unit for registration based on a 
demand for processing various services supplied 
from a contact. A table storage stores an area size of 
a data field tiiat can be assigned to a memory with 
respect to processing of various services, e.g., tine 
number of bytes. The memory has a plurality of data 
fields. The memory has data fields corresponding to 
an area user who has already provided a service 
using this IC card or corresponding to the types of 
service processing. 

Even if a given service is registered in advance in 
the table storage, If it has not been actually used yet, 
that is. if a card user does not wish to register the 
given service and does not register In a service 
company, no data field corresponding to the service 
Is formed. 

In a unit for permission, an area size demand of 
new service processing supplied from an externa! 
apparatus through the contact is compared with a 
usable area size read out from the information 
storage table. As a result of comparison, If the area 
size demand Is equal to or smaller than the usable 
area size, data corresponding to an address space 
of a size corresponding to one of the area size 
demand and the usabfe area size» e.g., a start 
address and a byte length of a data field area, are 
stored In the unit for registration, thus permitting the 
subsequent use. 
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said area user authentication means is operated 
based on signals from the area user identifica- 
tion input portion, the authentication code input 
means, and the table storage means. 

4. A system according to claim 1, wherein 
said area size calculating means Is operated 
based on the signals from the area user 
authentication means, the area size demand 
input means, the table storage means, and the 
information storage means for respective data 
fields. 



Claims 

35 

1. A system for data field area acquisition in 
an IC card for multiple services, said system 
comprising: 

a plurality of data fields for storing data; 

area user identification input means ; 40 

area user authentication code input means; 

area size demand input means; 

area user authentication means; 

area size calculating means for calculating a 
remainder area for an authenticated area user; 45 

table storage means for storing table for 
data field control; and 

data field area acquiring means, 

calculation of a remainder area for user 
authenticated by said area user authentication 50 
means being carried out based on an input area 
size demand and Information stored in said 
table storage means; 

based on the cumulative result of the area 
user authentication and the calculation of the 55 
remainder area for the authenticated area user, 
acquisition of an additional data field area being 
carried out within a limit of usable area size. 

2. A system according to claim 1, wherein 

said table storage means stores a plurality of 60 
area user identifications, area user authentica- 
tion codes corresponding to the area user 
identifications, and usable area size information 
corresponding to each area user. 

3. A system according to claim 1. wherein 65 
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Fig. 5 



Fig. 5A 



Fig.SB 
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NO COINCIDENT 
IDENTIFICATION 



SEARCH FOR AREA USER IDENTIFICATION 
CORRESPONDING TO INPUT AREA USER 
IDENTIFICATION 



S2- 



I 



VALIDATE AUTHENTICATION CODE 
CORRESPONDING COINCIDENT AREA USER 
IDENTIFICATION WITH INPUT 
AUTHENTICATION CODE 



S3 



AUTHENTICATION CODE COINCIDE WITH 
INPUT AUTHENTICATION CODE ? 



NO 
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YES 



FIND OUT DATA FIELD HAVING AREA 
USER IDENTIFICATION COINCIDENT 
WITH INPUT AREA USER IDENTIFICATION 



S5 



DERIVE USED AREA SIZE 
BY 

SUMMING SIZES OF FOUND DATA FIELD 
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Fig. 5B 




ACQUIRE NEW DATA FIELD AREA; 
SET AREA USER IDENTIFICATION^ 
ESTABLISH DATA FIELD 
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